Securityauditor

Skill: SecurityAuditor

This skill is dedicated to maintaining the "Fortress" integrity of the Eden framework, specifically focusing on data isolation and reliable access control.

Core Responsibilities

1. Multi-Tenancy Isolation:

   • Mixin Check: Ensure every model that should be tenant-scoped inherits from TenantMixin.
   • Context Leakage: Verify that queries are not bypassing the automatic _base_select filters.
   • Creation Safeguard: Confirm before_create hooks are correctly setting tenant_id.

2. Authorization & RBAC:

   • Decorator Audit: Ensure roles_required and permissions_required are applied to all sensitive entry points.
   • Policy Integrity: Audit __rbac__ configurations on models for logical consistency (e.g., is correctly implemented).